claude-code-workflow 6.3.18 → 6.3.19

package/ccw/dist/core/auth/csrf-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf-manager.js","sourceRoot":"","sources":["../../../src/core/auth/csrf-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAarC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAC1D,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAE/D,MAAM,OAAO,gBAAgB;IACV,UAAU,CAAS;IACnB,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC7C,YAAY,CAAwB;IAErD,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC;QAE7D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,2BAA2B,CAAC;QACnF,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;gBACnC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAEtB,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;YACtB,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU;YACzC,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,SAAiB;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC9B,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAEjD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oBAAoB,CAAC,QAAgB,IAAI,CAAC,GAAG,EAAE;QAC7C,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3B,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF;AAED,IAAI,mBAAmB,GAA4B,IAAI,CAAC;AAExD,MAAM,UAAU,mBAAmB,CAAC,OAAiC;IACnE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,mBAAmB,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,IAAI,mBAAmB,EAAE,CAAC;QACxB,mBAAmB,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;IACD,mBAAmB,GAAG,IAAI,CAAC;AAC7B,CAAC"}

package/ccw/dist/core/auth/csrf-middleware.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingMessage, ServerResponse } from 'http';
+export interface CsrfMiddlewareContext {
+    pathname: string;
+    req: IncomingMessage;
+    res: ServerResponse;
+}
+export declare function csrfValidation(ctx: CsrfMiddlewareContext): Promise<boolean>;
+//# sourceMappingURL=csrf-middleware.d.ts.map

package/ccw/dist/core/auth/csrf-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf-middleware.d.ts","sourceRoot":"","sources":["../../../src/core/auth/csrf-middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAI5D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;CACrB;AAsGD,wBAAsB,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CA+CjF"}

package/ccw/dist/core/auth/csrf-middleware.js

@@ -0,0 +1,141 @@
+import { getCsrfTokenManager } from './csrf-manager.js';
+function getHeaderValue(header) {
+    if (!header)
+        return null;
+    if (Array.isArray(header))
+        return header[0] ?? null;
+    return header;
+}
+function parseCookieHeader(cookieHeader) {
+    if (!cookieHeader)
+        return {};
+    const cookies = {};
+    for (const part of cookieHeader.split(';')) {
+        const [rawName, ...rawValueParts] = part.trim().split('=');
+        if (!rawName)
+            continue;
+        const rawValue = rawValueParts.join('=');
+        try {
+            cookies[rawName] = decodeURIComponent(rawValue);
+        }
+        catch {
+            cookies[rawName] = rawValue;
+        }
+    }
+    return cookies;
+}
+function appendSetCookie(res, cookie) {
+    const existing = res.getHeader('Set-Cookie');
+    if (!existing) {
+        res.setHeader('Set-Cookie', cookie);
+        return;
+    }
+    if (Array.isArray(existing)) {
+        res.setHeader('Set-Cookie', [...existing, cookie]);
+        return;
+    }
+    res.setHeader('Set-Cookie', [String(existing), cookie]);
+}
+function setCsrfCookie(res, token, maxAgeSeconds) {
+    const attributes = [
+        `XSRF-TOKEN=${encodeURIComponent(token)}`,
+        'Path=/',
+        'HttpOnly',
+        'SameSite=Strict',
+        `Max-Age=${maxAgeSeconds}`,
+    ];
+    appendSetCookie(res, attributes.join('; '));
+}
+function envFlagEnabled(name) {
+    const value = process.env[name];
+    if (!value)
+        return false;
+    return ['1', 'true', 'yes', 'on'].includes(value.trim().toLowerCase());
+}
+async function readRawBody(req) {
+    const withCache = req;
+    if (typeof withCache.__ccwRawBody === 'string')
+        return withCache.__ccwRawBody;
+    return new Promise((resolve, reject) => {
+        let body = '';
+        req.on('data', (chunk) => {
+            body += chunk.toString();
+        });
+        req.on('end', () => {
+            withCache.__ccwRawBody = body;
+            resolve(body);
+        });
+        req.on('error', reject);
+    });
+}
+async function readJsonBody(req) {
+    const withCache = req;
+    if (withCache.body !== undefined)
+        return withCache.body;
+    const raw = await readRawBody(req);
+    if (!raw)
+        return undefined;
+    try {
+        const parsed = JSON.parse(raw);
+        withCache.body = parsed;
+        return parsed;
+    }
+    catch {
+        return undefined;
+    }
+}
+function extractCsrfTokenFromBody(body) {
+    if (!body || typeof body !== 'object')
+        return null;
+    const record = body;
+    const token = record.csrfToken;
+    return typeof token === 'string' && token ? token : null;
+}
+function writeJson(res, status, body) {
+    res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8' });
+    res.end(JSON.stringify(body));
+}
+export async function csrfValidation(ctx) {
+    const { pathname, req, res } = ctx;
+    if (!pathname.startsWith('/api/'))
+        return true;
+    if (envFlagEnabled('CCW_DISABLE_CSRF'))
+        return true;
+    const method = (req.method || 'GET').toUpperCase();
+    if (!['POST', 'PUT', 'PATCH', 'DELETE'].includes(method))
+        return true;
+    // Always allow token acquisition routes and webhook endpoints.
+    if (pathname === '/api/auth/token')
+        return true;
+    if (pathname === '/api/hook')
+        return true;
+    // Requests authenticated via Authorization header do not require CSRF protection.
+    const authorization = getHeaderValue(req.headers.authorization);
+    if (authorization && /^Bearer\s+.+$/i.test(authorization))
+        return true;
+    const headerToken = getHeaderValue(req.headers['x-csrf-token']);
+    const cookies = parseCookieHeader(getHeaderValue(req.headers.cookie));
+    const cookieToken = cookies['XSRF-TOKEN'];
+    let bodyToken = null;
+    if (!headerToken && !cookieToken) {
+        const body = await readJsonBody(req);
+        bodyToken = extractCsrfTokenFromBody(body);
+    }
+    const token = headerToken || bodyToken || cookieToken || null;
+    const sessionId = cookies.ccw_session_id;
+    if (!token || !sessionId) {
+        writeJson(res, 403, { error: 'CSRF validation failed' });
+        return false;
+    }
+    const tokenManager = getCsrfTokenManager();
+    const ok = tokenManager.validateToken(token, sessionId);
+    if (!ok) {
+        writeJson(res, 403, { error: 'CSRF validation failed' });
+        return false;
+    }
+    const nextToken = tokenManager.generateToken(sessionId);
+    res.setHeader('X-CSRF-Token', nextToken);
+    setCsrfCookie(res, nextToken, 15 * 60);
+    return true;
+}
+//# sourceMappingURL=csrf-middleware.js.map

package/ccw/dist/core/auth/csrf-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf-middleware.js","sourceRoot":"","sources":["../../../src/core/auth/csrf-middleware.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAQxD,SAAS,cAAc,CAAC,MAAqC;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAuC;IAChE,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,GAAmB,EAAE,MAAc;IAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB,EAAE,KAAa,EAAE,aAAqB;IAC9E,MAAM,UAAU,GAAG;QACjB,cAAc,kBAAkB,CAAC,KAAK,CAAC,EAAE;QACzC,QAAQ;QACR,UAAU;QACV,iBAAiB;QACjB,WAAW,aAAa,EAAE;KAC3B,CAAC;IACF,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAoB;IAC7C,MAAM,SAAS,GAAG,GAAuD,CAAC;IAC1E,IAAI,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,YAAY,CAAC;IAE9E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAoB;IAC9C,MAAM,SAAS,GAAG,GAAgD,CAAC;IACnE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAa;IAC7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAA6B;IACnF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAC7E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAA0B;IAC7D,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEnC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,cAAc,CAAC,kBAAkB,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtE,+DAA+D;IAC/D,IAAI,QAAQ,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAE1C,kFAAkF;IAClF,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,aAAa,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvE,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,iBAAiB,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1C,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,IAAI,SAAS,IAAI,WAAW,IAAI,IAAI,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC;IAEzC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,MAAM,EAAE,GAAG,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACxD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAEvC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/ccw/dist/core/auth/middleware.d.ts

@@ -0,0 +1,15 @@
+import type { IncomingMessage, ServerResponse } from 'http';
+import type { TokenManager } from './token-manager.js';
+export interface AuthMiddlewareContext {
+    pathname: string;
+    req: IncomingMessage;
+    res: ServerResponse;
+    tokenManager: TokenManager;
+    secretKey: string;
+    unauthenticatedPaths?: Set<string>;
+}
+export declare function extractAuthToken(req: IncomingMessage): string | null;
+export declare function isLocalhostRequest(req: IncomingMessage): boolean;
+export declare function setAuthCookie(res: ServerResponse, token: string, expiresAt: Date): void;
+export declare function authMiddleware(ctx: AuthMiddlewareContext): boolean;
+//# sourceMappingURL=middleware.d.ts.map

package/ccw/dist/core/auth/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/core/auth/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACpC;AAyBD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAWpE;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAGhE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,CAYvF;AAOD,wBAAgB,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAoBlE"}

package/ccw/dist/core/auth/middleware.js

@@ -0,0 +1,76 @@
+function parseCookieHeader(cookieHeader) {
+    if (!cookieHeader)
+        return {};
+    const cookies = {};
+    for (const part of cookieHeader.split(';')) {
+        const [rawName, ...rawValueParts] = part.trim().split('=');
+        if (!rawName)
+            continue;
+        const rawValue = rawValueParts.join('=');
+        try {
+            cookies[rawName] = decodeURIComponent(rawValue);
+        }
+        catch {
+            cookies[rawName] = rawValue;
+        }
+    }
+    return cookies;
+}
+function getHeaderValue(header) {
+    if (!header)
+        return null;
+    if (Array.isArray(header))
+        return header[0] ?? null;
+    return header;
+}
+export function extractAuthToken(req) {
+    const authorization = getHeaderValue(req.headers.authorization);
+    if (authorization) {
+        const match = authorization.match(/^Bearer\s+(.+)$/i);
+        if (match?.[1])
+            return match[1].trim();
+    }
+    const cookies = parseCookieHeader(getHeaderValue(req.headers.cookie));
+    if (cookies.auth_token)
+        return cookies.auth_token;
+    return null;
+}
+export function isLocalhostRequest(req) {
+    const remote = req.socket?.remoteAddress ?? '';
+    return remote === '127.0.0.1' || remote === '::1' || remote === '::ffff:127.0.0.1';
+}
+export function setAuthCookie(res, token, expiresAt) {
+    const maxAgeSeconds = Math.max(0, Math.floor((expiresAt.getTime() - Date.now()) / 1000));
+    const attributes = [
+        `auth_token=${encodeURIComponent(token)}`,
+        'Path=/',
+        'HttpOnly',
+        'SameSite=Strict',
+        `Max-Age=${maxAgeSeconds}`,
+    ];
+    res.setHeader('Set-Cookie', attributes.join('; '));
+}
+function writeJson(res, status, body) {
+    res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8' });
+    res.end(JSON.stringify(body));
+}
+export function authMiddleware(ctx) {
+    const { pathname, req, res, tokenManager, secretKey, unauthenticatedPaths } = ctx;
+    if (!pathname.startsWith('/api/'))
+        return true;
+    if (unauthenticatedPaths?.has(pathname))
+        return true;
+    const token = extractAuthToken(req);
+    if (!token) {
+        writeJson(res, 401, { error: 'Unauthorized' });
+        return false;
+    }
+    const ok = tokenManager.validateToken(token, secretKey);
+    if (!ok) {
+        writeJson(res, 401, { error: 'Unauthorized' });
+        return false;
+    }
+    req.authenticated = true;
+    return true;
+}
+//# sourceMappingURL=middleware.js.map

package/ccw/dist/core/auth/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/core/auth/middleware.ts"],"names":[],"mappings":"AAaA,SAAS,iBAAiB,CAAC,YAAuC;IAChE,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,MAAqC;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAoB;IACnD,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC;IAElD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAoB;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;IAC/C,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,kBAAkB,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAmB,EAAE,KAAa,EAAE,SAAe;IAC/E,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAEzF,MAAM,UAAU,GAAG;QACjB,cAAc,kBAAkB,CAAC,KAAK,CAAC,EAAE;QACzC,QAAQ;QACR,UAAU;QACV,iBAAiB;QACjB,WAAW,aAAa,EAAE;KAC3B,CAAC;IAEF,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAA6B;IACnF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAC7E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAA0B;IACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,oBAAoB,EAAE,GAAG,GAAG,CAAC;IAElF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,oBAAoB,EAAE,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,EAAE,GAAG,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAEA,GAA0D,CAAC,aAAa,GAAG,IAAI,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/ccw/dist/core/auth/token-manager.d.ts

@@ -0,0 +1,41 @@
+export interface TokenResult {
+    token: string;
+    expiresAt: Date;
+}
+export interface TokenInfo extends TokenResult {
+    issuedAt: Date;
+    revokedAt?: Date;
+    rotatedAt?: Date;
+    replacedBy?: string;
+}
+export interface TokenManagerOptions {
+    authDir?: string;
+    secretKeyPath?: string;
+    tokenPath?: string;
+    tokenTtlMs?: number;
+    rotateBeforeExpiryMs?: number;
+}
+export declare class TokenManager {
+    private readonly authDir;
+    private readonly secretKeyPath;
+    private readonly tokenPath;
+    private readonly tokenTtlMs;
+    private readonly rotateBeforeExpiryMs;
+    private secretKey;
+    private readonly activeTokens;
+    constructor(options?: TokenManagerOptions);
+    getSecretKey(): string;
+    generateToken(secretKey: string): TokenResult;
+    validateToken(token: string, secretKey: string): boolean;
+    refreshToken(token: string, secretKey: string): TokenResult;
+    /**
+     * Read an existing persisted token or create a new one.
+     * If the existing token is nearing expiry, rotate it.
+     */
+    getOrCreateAuthToken(): TokenResult;
+    revokeToken(token: string): void;
+}
+export declare function getTokenManager(options?: TokenManagerOptions): TokenManager;
+export declare function resetTokenManager(): void;
+export declare function getOrCreateAuthToken(): TokenResult;
+//# sourceMappingURL=token-manager.d.ts.map

package/ccw/dist/core/auth/token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-manager.d.ts","sourceRoot":"","sources":["../../../src/core/auth/token-manager.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,SAAU,SAAQ,WAAW;IAC5C,QAAQ,EAAE,IAAI,CAAC;IACf,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAuCD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAE9C,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;gBAEjD,OAAO,GAAE,mBAAwB;IAQ7C,YAAY,IAAI,MAAM;IAmBtB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW;IAkB7C,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAYxD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW;IAc3D;;;OAGG;IACH,oBAAoB,IAAI,WAAW;IAsCnC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAajC;AAID,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,YAAY,CAK3E;AAED,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED,wBAAgB,oBAAoB,IAAI,WAAW,CAElD"}

package/ccw/dist/core/auth/token-manager.js

@@ -0,0 +1,171 @@
+import { randomBytes } from 'crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from 'fs';
+import { dirname, join } from 'path';
+import jwt from 'jsonwebtoken';
+import { getCCWHome } from '../../config/storage-paths.js';
+const DEFAULT_TOKEN_TTL_MS = 24 * 60 * 60 * 1000;
+const DEFAULT_ROTATE_BEFORE_EXPIRY_MS = 60 * 60 * 1000;
+const JWT_ALGORITHM = 'HS256';
+function ensureDirectory(dirPath) {
+    if (!existsSync(dirPath)) {
+        mkdirSync(dirPath, { recursive: true });
+    }
+}
+function bestEffortRestrictPermissions(filePath, mode) {
+    try {
+        chmodSync(filePath, mode);
+    }
+    catch {
+        // Ignore permission errors (e.g., Windows or restrictive environments)
+    }
+}
+function writeSecretFile(filePath, content) {
+    ensureDirectory(dirname(filePath));
+    writeFileSync(filePath, content, { encoding: 'utf8', mode: 0o600 });
+    bestEffortRestrictPermissions(filePath, 0o600);
+}
+function writeTokenFile(filePath, content) {
+    ensureDirectory(dirname(filePath));
+    writeFileSync(filePath, content, { encoding: 'utf8', mode: 0o600 });
+    bestEffortRestrictPermissions(filePath, 0o600);
+}
+function parseJwtExpiry(token) {
+    const decoded = jwt.decode(token);
+    if (!decoded || typeof decoded !== 'object')
+        return null;
+    if (typeof decoded.exp !== 'number')
+        return null;
+    return new Date(decoded.exp * 1000);
+}
+export class TokenManager {
+    authDir;
+    secretKeyPath;
+    tokenPath;
+    tokenTtlMs;
+    rotateBeforeExpiryMs;
+    secretKey = null;
+    activeTokens = new Map();
+    constructor(options = {}) {
+        this.authDir = options.authDir ?? join(getCCWHome(), 'auth');
+        this.secretKeyPath = options.secretKeyPath ?? join(this.authDir, 'secret.key');
+        this.tokenPath = options.tokenPath ?? join(this.authDir, 'token.jwt');
+        this.tokenTtlMs = options.tokenTtlMs ?? DEFAULT_TOKEN_TTL_MS;
+        this.rotateBeforeExpiryMs = options.rotateBeforeExpiryMs ?? DEFAULT_ROTATE_BEFORE_EXPIRY_MS;
+    }
+    getSecretKey() {
+        if (this.secretKey)
+            return this.secretKey;
+        ensureDirectory(this.authDir);
+        if (existsSync(this.secretKeyPath)) {
+            const loaded = readFileSync(this.secretKeyPath, 'utf8').trim();
+            if (!loaded) {
+                throw new Error('Auth secret key file is empty');
+            }
+            this.secretKey = loaded;
+            return loaded;
+        }
+        const generated = randomBytes(32).toString('hex');
+        writeSecretFile(this.secretKeyPath, generated);
+        this.secretKey = generated;
+        return generated;
+    }
+    generateToken(secretKey) {
+        const token = jwt.sign({
+            typ: 'ccw-api',
+            jti: randomBytes(16).toString('hex'),
+        }, secretKey, {
+            algorithm: JWT_ALGORITHM,
+            expiresIn: Math.floor(this.tokenTtlMs / 1000),
+        });
+        const expiresAt = parseJwtExpiry(token) ?? new Date(Date.now() + this.tokenTtlMs);
+        this.activeTokens.set(token, { token, expiresAt, issuedAt: new Date() });
+        return { token, expiresAt };
+    }
+    validateToken(token, secretKey) {
+        const info = this.activeTokens.get(token);
+        if (info?.revokedAt)
+            return false;
+        try {
+            jwt.verify(token, secretKey, { algorithms: [JWT_ALGORITHM] });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    refreshToken(token, secretKey) {
+        const existing = this.activeTokens.get(token);
+        if (existing) {
+            existing.revokedAt = new Date();
+        }
+        const next = this.generateToken(secretKey);
+        if (existing) {
+            existing.rotatedAt = new Date();
+            existing.replacedBy = next.token;
+        }
+        return next;
+    }
+    /**
+     * Read an existing persisted token or create a new one.
+     * If the existing token is nearing expiry, rotate it.
+     */
+    getOrCreateAuthToken() {
+        const secretKey = this.getSecretKey();
+        if (existsSync(this.tokenPath)) {
+            const persisted = readFileSync(this.tokenPath, 'utf8').trim();
+            if (persisted && this.validateToken(persisted, secretKey)) {
+                const expiresAt = parseJwtExpiry(persisted);
+                if (expiresAt) {
+                    // Ensure persisted token is tracked for revocation support
+                    if (!this.activeTokens.has(persisted)) {
+                        this.activeTokens.set(persisted, { token: persisted, expiresAt, issuedAt: new Date() });
+                    }
+                    const msUntilExpiry = expiresAt.getTime() - Date.now();
+                    if (msUntilExpiry > this.rotateBeforeExpiryMs) {
+                        return { token: persisted, expiresAt };
+                    }
+                }
+                // Token exists but is expiring soon (or expiry missing) → rotate
+                const rotated = this.generateToken(secretKey);
+                writeTokenFile(this.tokenPath, rotated.token);
+                const existing = this.activeTokens.get(persisted);
+                if (existing) {
+                    existing.rotatedAt = new Date();
+                    existing.replacedBy = rotated.token;
+                }
+                return rotated;
+            }
+        }
+        const created = this.generateToken(secretKey);
+        writeTokenFile(this.tokenPath, created.token);
+        return created;
+    }
+    revokeToken(token) {
+        const info = this.activeTokens.get(token);
+        if (info) {
+            info.revokedAt = new Date();
+        }
+        else {
+            this.activeTokens.set(token, {
+                token,
+                issuedAt: new Date(),
+                expiresAt: new Date(0),
+                revokedAt: new Date(),
+            });
+        }
+    }
+}
+let tokenManagerInstance = null;
+export function getTokenManager(options) {
+    if (!tokenManagerInstance) {
+        tokenManagerInstance = new TokenManager(options);
+    }
+    return tokenManagerInstance;
+}
+export function resetTokenManager() {
+    tokenManagerInstance = null;
+}
+export function getOrCreateAuthToken() {
+    return getTokenManager().getOrCreateAuthToken();
+}
+//# sourceMappingURL=token-manager.js.map

package/ccw/dist/core/auth/token-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-manager.js","sourceRoot":"","sources":["../../../src/core/auth/token-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,GAAG,MAAM,cAAc,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAsB3D,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,+BAA+B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACvD,MAAM,aAAa,GAAc,OAAO,CAAC;AAEzC,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,QAAgB,EAAE,IAAY;IACnE,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACxD,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,6BAA6B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,OAAe;IACvD,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,6BAA6B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,OAAO,YAAY;IACN,OAAO,CAAS;IAChB,aAAa,CAAS;IACtB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,oBAAoB,CAAS;IAEtC,SAAS,GAAkB,IAAI,CAAC;IACvB,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE7D,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC;QAC7D,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,+BAA+B,CAAC;IAC9F,CAAC;IAED,YAAY;QACV,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAE1C,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClD,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CACpB;YACE,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;SACrC,EACD,SAAS,EACT;YACE,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;SAC9C,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAClF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,SAAiB;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,EAAE,SAAS;YAAE,OAAO,KAAK,CAAC;QAElC,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,SAAiB;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAChC,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,oBAAoB;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAEtC,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9D,IAAI,SAAS,IAAI,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC1D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC5C,IAAI,SAAS,EAAE,CAAC;oBACd,2DAA2D;oBAC3D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC1F,CAAC;oBAED,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBACvD,IAAI,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;wBAC9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;oBACzC,CAAC;gBACH,CAAC;gBAED,iEAAiE;gBACjE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC9C,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAClD,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;oBAChC,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;gBACtC,CAAC;gBAED,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,WAAW,CAAC,KAAa;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE;gBAC3B,KAAK;gBACL,QAAQ,EAAE,IAAI,IAAI,EAAE;gBACpB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;gBACtB,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED,IAAI,oBAAoB,GAAwB,IAAI,CAAC;AAErD,MAAM,UAAU,eAAe,CAAC,OAA6B;IAC3D,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,oBAAoB,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,eAAe,EAAE,CAAC,oBAAoB,EAAE,CAAC;AAClD,CAAC"}

package/ccw/dist/core/cache-manager.d.ts

@@ -21,23 +21,23 @@ export declare class CacheManager<T> {
      * @param watchPaths - Array of file/directory paths to check for modifications
      * @returns Cached data or null if invalid/expired
      */
-    get(watchPaths?: string[]): T | null;
+    get(watchPaths?: string[]): Promise<T | null>;
     /**
      * Store data in cache with current timestamp and file hashes
      * @param data - Data to cache
      * @param watchPaths - Array of file/directory paths to track
      */
-    set(data: T, watchPaths?: string[]): void;
+    set(data: T, watchPaths?: string[]): Promise<void>;
     /**
      * Invalidate (delete) the cache
      */
-    invalidate(): void;
+    invalidate(): Promise<void>;
     /**
      * Check if cache is valid without retrieving data
      * @param watchPaths - Array of file/directory paths to check
      * @returns True if cache exists and is valid
      */
-    isValid(watchPaths?: string[]): boolean;
+    isValid(watchPaths?: string[]): Promise<boolean>;
     /**
      * Compute file modification times for all watched paths
      * @param watchPaths - Array of file/directory paths
@@ -62,12 +62,12 @@ export declare class CacheManager<T> {
      * Get cache statistics
      * @returns Cache info object
      */
-    getStats(): {
+    getStats(): Promise<{
         exists: boolean;
         age?: number;
         fileCount?: number;
         size?: number;
-    };
+    }>;
 }
 /**
  * Create a cache manager for dashboard data

package/ccw/dist/core/cache-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-manager.d.ts","sourceRoot":"","sources":["../../src/core/cache-manager.ts"],"names":[],"mappings":"AAWA,UAAU,YAAY;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,qBAAa,YAAY,CAAC,CAAC;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;OAIG;gBACS,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB;IASxD;;;;OAIG;IACH,GAAG,CAAC,UAAU,GAAE,MAAM,EAAO,GAAG,CAAC,GAAG,IAAI;IAuCxC;;;;OAIG;IACH,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,GAAE,MAAM,EAAO,GAAG,IAAI;IA0B7C;;OAEG;IACH,UAAU,IAAI,IAAI;IAUlB;;;;OAIG;IACH,OAAO,CAAC,UAAU,GAAE,MAAM,EAAO,GAAG,OAAO;IAI3C;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IA8BzB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAwCrB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAoBnB;;;OAGG;IACH,QAAQ,IAAI;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;CAoBjF;AAYD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAMzF"}
+{"version":3,"file":"cache-manager.d.ts","sourceRoot":"","sources":["../../src/core/cache-manager.ts"],"names":[],"mappings":"AAWA,UAAU,YAAY;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,qBAAa,YAAY,CAAC,CAAC;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;OAIG;gBACS,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB;IASxD;;;;OAIG;IACG,GAAG,CAAC,UAAU,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IA2CvD;;;;OAIG;IACG,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB5D;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IASjC;;;;OAIG;IACG,OAAO,CAAC,UAAU,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D;;;;OAIG;YACW,iBAAiB;IA2B/B;;;;;OAKG;YACW,aAAa;IAoD3B;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAoBnB;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAuBhG;AAYD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAKzF"}